Privacy Policy
Effective 28 August 2026
Osceo analyses photographs of your body. That makes this policy more important than most, so it is written plainly rather than defensively. If anything here is unclear, ask us at osceostudio@gmail.com.
What is happening today: Osceo is not open yet. Right now this site collects one thing, an email address, if you choose to join the waitlist. No accounts exist, no photographs are being uploaded, and nothing is being analysed. The sections below describing photographs set out how the service will work when it opens. They are published in advance so you can read the commitments before you decide to sign up, not because any of it is running yet.
Who we are
Osceo is an independent project. Its operator is the data controller for the information described here, and can be reached at osceostudio@gmail.com. Every request described in this policy can be made at that address.
Osceo is not yet registered as a business in any country. Until that is settled, this policy does not name a governing law or a lead supervisory authority, because naming one we cannot stand behind would be worse than naming none. We will publish our full legal details, including the governing law and the supervisory authority, before accounts open and before any photograph is uploaded.
What we collect
- Waitlist. Your email address, and the date you joined. Nothing else. We send you one confirmation when you join and one message when Osceo opens. Reply to either and we will remove you.
- Account. Email address, date of birth to verify you are 18 or over, and optionally sex and height, which the measurement formulas require.
- Photographs of your body. The four photographs you upload for each scan. See the dedicated section below.
- Self reported measurements. Tape measurements such as neck, waist, and hip circumference, if you choose to provide them.
- Computed measurements. The angles, ratios, and coordinates derived from your photographs, and the reports generated from them. A full report also includes suggested exercises, chosen automatically from those measurements. Nothing about you is sent anywhere to produce them: the selection happens from your own numbers, against a fixed set of guidance held in our own code.
- Payment information. Handled entirely by Stripe. We receive a confirmation that you paid and a customer reference. We never see or store your card number.
- Basic technical data. Standard server logs, including IP address and browser type, kept for security and debugging.
Our lawful basis for using your data
UK and EU data protection law requires a lawful basis for every use of your personal data, and a second, stricter condition for anything counting as health information. This section sets out both, use by use.
- Your account, and your date of birth. Used to give you access and to check you are 18 or over. Lawful basis: performance of our contract with you, and our legitimate interest in keeping under 18s off a service that measures bodies.
- Your photographs, and the measurements taken from them. Used to produce your report. Lawful basis: performance of our contract with you.
- The same measurements, treated as health information. Measurements of a body, and guidance about posture, may amount to data concerning health. Where they do, our condition is your explicit consent, which we ask for separately before you can upload anything. You can withdraw it at any time by deleting your data, and until you give it our system will not create a scan at all.
- Tape measurements and the body fat estimate. Same basis, and the same explicit consent, since these are the most clearly health related figures we hold.
- Payments. Handled by Stripe. Lawful basis: performance of our contract, and our legal obligation to keep financial records.
- Keeping the service running and secure. Error logs, abuse prevention, and the record of admin access to photographs. Lawful basis: our legitimate interests in operating a working and accountable service.
- The waitlist. Your consent, given when you entered your email. Withdraw it by asking us to remove you.
We do not use your data for advertising, we do not profile you for anything other than producing your own report, and we never use your photographs to train machine learning models.
Something we want to be straight about. Consent is only meaningful when it is freely given, and it is fair to point out that this particular consent is required to use a service whose entire purpose is measuring you. We think that is honest rather than coercive, because the processing is the product and you are choosing to buy it rather than having it attached to something unrelated. We ask separately anyway, and refusing costs you nothing beyond not using Osceo.
Your photographs
This is the part that matters most, so it is spelled out in full.
- Photographs are stored in a private storage bucket. They are never placed in a public bucket and never given a public URL.
- Access is controlled at the database level so that your account can retrieve only your own files. When a photograph is displayed to you, it is served through a signed link that expires.
- During early access, a human, meaning the person who runs Osceo, may view your photographs in order to check photo quality and to write or sanity check your report by hand. This is how the service works while the analysis is being validated. If you are not comfortable with that, do not upload photographs during this period.
- Your photographs are never used to train machine learning models, ours or anyone else's.
- Your photographs are never sold, shared, published, or used in marketing.
- Your photographs are never sent to the AI service that writes your report. That service receives computed numbers only, meaning angles and ratios, and never sees an image.
- Landmark extraction, the step that turns a photograph into coordinates, runs inside your own browser, not on our servers.
How long we keep things
- Photographs are kept until you delete them or close your account. You can delete the photographs from any scan at any time while keeping the measurements derived from them, so your progress history survives.
- Measurements and reports are kept while your account is open, because tracking change over time is the point of the product.
- When you delete your account, your photographs, measurements, and reports are permanently deleted within 30 days. Our database provider may hold internal daily backups for up to 7 days, so a deleted record can persist in those backups for that period before ageing out.
- Waitlist emails are kept until you unsubscribe or ask us to remove you.
- We may keep a minimal record of a transaction where tax or accounting law requires it. That record contains no photographs.
Who else processes your data
We use a small number of service providers. Each one only receives what it needs to do its job.
- Supabase for the database, authentication, and file storage. This is where photographs are stored.
- Netlify for website hosting and serving.
- Stripe for payment processing. Receives your payment details directly. We never handle them.
- Anthropic to generate the written portion of your report. Receives computed measurements only, never photographs, never your name or email.
We do not sell your personal information. We do not share it with advertisers. We do not run advertising or analytics trackers that follow you across other websites.
Your rights
Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, or stop using it. Account deletion is available in the product itself and does not require you to email anyone. For anything else, write to osceostudio@gmail.com and we will respond within 30 days.
If you are in the EU or the UK you also have the right to object to processing, to withdraw consent, to data portability, and to complain to a data protection regulator. You can always complain to the regulator in your own country. We will name our own lead supervisory authority here once our establishment is settled, which will happen before accounts open.
Where your data is held
Our database and file storage are hosted by Supabase in London, United Kingdom. Our website is served by Netlify from a global content delivery network. Stripe and Anthropic process data on their own infrastructure, which is primarily in the United States. Neither of them receives a photograph.
Before accounts open we will confirm and publish the safeguards we rely on for transfers of personal data out of the EU, and we will not accept a single photograph until that is settled.
Security
Photographs are held in private storage with row level access control, served only through expiring signed links, and encrypted in transit and at rest by our storage provider. No system is perfectly secure, and we will not pretend otherwise, but the design goal is that a mistake in the application cannot expose one user's photographs to another.
Age
Osceo is for adults aged 18 and over only. We collect date of birth at signup and check it before any upload is allowed. If we learn that someone under 18 has created an account, we delete it and its contents.
Cookies
We use cookies only to keep you signed in and to keep the site secure. We do not use advertising or cross site tracking cookies.
Changes
If we change this policy in a way that materially affects how your photographs are handled, we will email you before the change takes effect.